Package: bluez-tools
Version: 2.0~20170911.0.7cb788c-4
Severity: normal
Tags: patch upstream

Hi,

There is a NULL pointer dereference in bt-device.c.
Since upstream is not very active, please apply this patch downstream.
It should be apparent that the only case in which behavior will differ is in 
the case that NULL would be dereferenced.

--- src/bt-device.c.2   2022-11-12 11:59:49.948223308 -0500
+++ src/bt-device.c     2022-11-12 11:57:55.264211619 -0500
@@ -622,7 +622,7 @@
         g_print("  Connected: %d\n", device_get_connected(device, &error));
         g_print("  UUIDs: [");
         const gchar **uuids = device_get_uuids(device, &error);
-        for (int j = 0; uuids[j] != NULL; j++)
+        for (int j = 0; uuids && uuids[j] != NULL; j++)
         {
             if (j > 0) g_print(", ");
             g_print("%s", uuid2name(uuids[j]));


I hope we can get this in Bookworm.

Thanks!


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (2, 'unstable-debug'), 
(2, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, arm64

Kernel: Linux 5.19.0-2-amd64 (SMP w/2 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER, TAINT_WARN, TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages bluez-tools depends on:
ii  libc6         2.36-4
ii  libglib2.0-0  2.74.1-1
ii  libreadline8  8.2-1.1

Versions of packages bluez-tools recommends:
ii  bluez-obexd  5.65-1+b1

bluez-tools suggests no packages.

-- no debconf information

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to